From the course: AWS: Networking

Unlock this course with a free trial

Join today to access over 25,300 courses taught by industry experts.

VPC Flow Logs overview

VPC Flow Logs overview - Amazon Web Services (AWS) Tutorial

From the course: AWS: Networking

Start my 1-month free trial Buy for my team

VPC Flow Logs overview

“

- Experienced network security professionals may feel uncomfortable about moving services off premises. This is typically caused by a reduced ability to monitor network traffic. AWS offers VPC flow logs as a way to mitigate that concern. VPC flow logs are a way to log network traffic associated with a VPC. Flow logs can be created for any VPC within your account. Flow logs associated with a VPC will capture traffic for every network interface in that VPC at roughly 15-minute intervals. Similar to other AWS services, VPC flow logs are stored in CloudWatch, and are accessible via the web console. Upon creation, there is about a 10-minute delay before the logs become visible within the console. Since flow logs are published to CloudWatch, an IAM role with the appropriate permissions is required. Flow logs can be configured to store accepted or rejected network traffic. A single log can be configured to store both accepted and…

Contents